# Safety net for automatic-updates.py.
#
# Format, one entry per line:
#   <target> [min_from_version]
#
# <target> is a release tag (e.g. 0.0.0.8) or a dev-branch commit SHA
# (short or full, e.g. 83937c3) to block auto-installing.
#
# [min_from_version] is optional. If present, the block only applies to
# devices whose CURRENT version is OLDER than this -- a device already
# on min_from_version (or newer) is allowed through. Use this when a
# specific upgrade path is what's actually unsafe (e.g. a migration that
# only breaks devices jumping in from more than one version back), not
# the target version itself. Omit it to block the target unconditionally
# regardless of what the device is currently running.
#
# Examples:
#   0.0.0.8               -- blocks everyone from auto-installing 0.0.0.8
#   0.0.0.8 0.0.0.7        -- blocks it only for devices older than
#                             0.0.0.7; a device already on 0.0.0.7 can
#                             still update
#
# This file is always fetched fresh from the main branch's current HEAD,
# separately from whatever release/commit is actually being considered
# for install. That means it works retroactively: even a version that's
# already published and already tagged bad can be blocked after the
# fact just by adding a line here and pushing to main.
#
# A blocked version still shows as "update available" on the device --
# it just won't be auto-installed. Whoever's running that device needs
# to update it manually (SSH in, or reflash). The device also keeps
# showing this on screen (at boot, and periodically thereafter) until
# it's updated past the blocked version.
#
# Lines starting with # and blank lines are ignored.
